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(57) Abstract 

Radio frequency based cellular telecommunication systems often require a subscriber to 
maintain a proprietarN identifier or serial number which is transmitted to a fixed network communi- 
cation unit to verify the authenticity of the subscriber. Unauthorized detection of these proprietary 
ID s is substantially decreased by this invention. This invention describes an enciphering method 
and cal! sequencing method, which when combined, pro\ide5 substantial protection for the sub- 
scriber against unauthorized detection of their proprietary identifiers. 
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METHOD FOR AUTHENTICATION AND PROTECTION OF 
SUBSCRIBERS IN TELECOMMUNICATION 
SYSTEMS. 



TECHNICAL Rg[ D 



This invention relates generally to communication systems and 
more particularly to radio frequency (RF) cellular 
telecommunication systems. 



Cellular radio telephone systems typically include 

10 subscriber units (such as mobile or portable units) which 

communicate with a fixed network communication unit via RF 
transmissions. A typical fixed communication network 
includes at least a base station and a switching center. One 
responsibility of the fixed network communication unit is to 

15 grant use of the communication system to the subscriber unit 
after the requesting subscriber unit meets the authentication 
requirements of the system. In a typical cellular telephone 
communication system, each subscriber unit is assigned a 
telephone number (mobile identification number) (MIN) and an 

2c identification number (or serial number) (SN) which uniquely 
identifies the subscriber to any fixed network communication 
unit. Each subscriber unit has a unique identification number 
that distinguishes it from other subscriber units. The fixed 
network communication unit has access to these identification 

25 numbers through a database. Often these numbers are used by 
the fixed network communication units to bill subscribers for 
the time the subscriber uses the system. When the subscriber 
calls another unit, he enters the phone number he wishes to 
call. The dialed phone number becomes the data to be sent to 
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the fixed network communication unit. Data may also include 
other information regarding a third communication unit such 
as a unites location. 

Detection of a legitimate subscriber's identification 
5 number may be accomplished by RF eavesdropping or by 
purposeful or inadvertent divulgence of the MIN/SN 
combination by the radio telephone installer. Once the 
subscriber's telephone number and identification number is 
known (stolen), a thief may reprogram another subscriber unit 

10 with the stolen identification number causing two or more 
subscriber units to have the same MIN/SN combination. 
Cellular radio telephone systems have authentication 
procedures to deny access to subscribers not having legitimate 
identification numbers, but do not have the capability to 

1: detect multiple users or effectively neutralize the effect of an 
installer leaking subscriber identification numbers. 
Therefore, the legitimate user is billed for both the thief's use 
and his own use. 

Several authentication techniques are known. EIA-553 

2c section 2.3 specifies that each subscriber shall have a M\N and 
a factory set SN. The telephone number which the subscriber 
is attempting to contact is the data that is transmitted by the- 
subscriber to the fixed network communication unit. 
Authentication is granted by this system if the MIN and 

25 corresponding SN are found in the fixed network 

communication unit database. Unfortunately, EIA-553 does not 
require the encipherment of the MiN or SN before transmission 
to the fixed network communication unit thereby permitting 
direct RF detection of any MIN or SN. In addition, this 

30 technique fails to provide protection against a thief that 
acquires a MIN/SN from an installer. 

Another authentication technique is described in 
European cellular communication system recommendations 
generated by the Groupe Special Mobile (GSM); see sections: 
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02.09. 02.17. 03.20, and 12.03. This method additionally 
requires the subscriber to oper.iy transmit a temporary mobile 
subscriber ID (TMSI) to the fixed network communication unit; 
the fixed network communication unit generates and sends a 
5 random number (RAND) to the subscriber. The enciphering 
technique requires the subscriber unit to autonomously 
retrieve at least three enciphering elements from its memory: 
a predetermined ciphering key, an SN (individual subscriber 
authentication key) and a MIN (international mobile subscriber 

ic identification number - IMS!). The subscriber then enciphers 
its SN and MIN using the cipher to construct the RAND into a 
signed response (SRES). The subscriber unit transmits this 
signed response back to the fixed network communication unit 
where the fixed network communication unit checks the SN, 

15 MIN, and ciphering key against its database using the 
subscriber's temporary ID (TMSI). 

The fixed network communication unit generates its 
response to the same random number using the information 
retrieved from the database and compares the subscriber 

20 signed response to the fixed network communication unit 
generated response. If the responses are substantially 
equivalent, authentication is confirmed. The dialed telephone^ 
number is only allowed to be transmitted after authentication" 
is granted. This system affords some protection against a 

25 thief that acquires the MIN/SN from an installer by enciphering 
the SN and reassigning a temporary TMSI each time the 
subscriber enters a different cell area. 

Although one technique enciphers the subscriber's serial 
number before transmission, neither system detects multiple 

3c users. Detection of thieves once they acquire access is 
important to maintaining a secure system. Moreover, the 
random number transmission (required for encipherment) 
necessitates additional communication between the subscriber 
unit and the fixed network communication unit each time a call 
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IS made which increases the probability of transmission error 
and adds a transmission step to the fixed network 
communication unit's authentication protocol routine. In 
addition, authentication must be verified before the system 
5 will allow data to be accepted. Therefore data must be sent 
after the steps of the authentication procedure are complete. 

There exists a need for a substantially enhanced 
authentication technique for a cellular telecommunication 
system that detects fraudulent users and efficiently protects 
ic Identification numbers from unauthorized detection. The 
authentication method should restrict an illegitimate user's 
capacity to utilize the system in the case where access is 
inadvertently granted. Further, an adequate level of security 
resulting from encipherment should not require additional 
15 transmission processes or inject higher error levels during the 
authentication process. 



BRIEF St JMM ARV OP THE INVFNTinM 

These needs and others are substantially met through 
provision of the method for authentication and protection of 
subscribers in telecommunication systems disclosed below. 
This method describes an authentication technique for use 
between a first communication unit, such as a subscriber unit, 
and a second communication unit, such as a fixed network 
communication unit, wherein the first communication unit 
modifies an ID. known to both the first communication unit and 
the second communication unit (such as a serial number), using 
data as one enciphering key and a second ID (such as a Personal 
Identification Number - PIN) as the other enciphering key. An 
historic non-arbitrary valup of predetermined communication 
events, such as a count of the number of telephone calls made 



BNSDOCID: <WO_9101067A2_L> 



wo 91/01067 




PCT/US90/03290 



by a subscriber, is maintained in both the first and second 
communication units. This value (count) is historic because it 
represents past telephone calls attributed to a communication 
unit, and it is non-arbitrary because this history of 
5 transactions (i.e., number of calls made) serves to identify an 
out-of-sync communication unit. 

The first communication unit transmits (via RF signals) 
the modified ID and count to a second communication unit. The 
second communication unit compares the count maintained by 

ic the first communication unit to the count maintained by the 
second unit. A count discrepancy indicates a different number 
of calls on one unit indicating a multiple user whose count is 
out of sequence. The second communication unit performs the 
same enciphering method on the known serial number using the 

15 data received and a known second ID. The second 

communication unit compares the received modified serial 
number and the serial number generated by the fixed network 
communication unit to determine if the serial number is valid. 
The invention is designed to substantially decrease 

2c unauthorized use of a first ID of a communication unit. The 
authentication method does not require the second ID to ever 
be transmitted by RF. 

This invention provides a means for detecting multiple 
subscribers using the same serial numbers and telephone 

25 numbers. Moreover, if a multiple user copies the information 
transmitted and uses the same information to access the 
system, the multiple user will be limited to only calling the 
telephone number that is in the authentication message; not a 
telephone number of his own choice. This authentication 

3C invention also reduces authentication errors by making more 
efficient use of the data transmitted and a second ID, by using 
them as a part of the cipher; the enciphering means does not 
require an additional RAND stream to be sent by a fixed 
network communication unit to be used as the common 
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enciphering base and thereby eliminates this additional 
.ransn.ss,on and therefore decreases the probability o, errors. 

BRIEF OF.srRiPTiriM nc t he nOAwiMr^o 

FIG. 1 is a block diagram of a typical subscriber 
communication unit and fixed network communication un„ 

u ed bv a sir T'' °' enciphering method 

used by a subscnber communication unit 

FIG^ 3 is a How chart of the authentication method used by a 

--rdance With the' 



10 



15 



BEST MOnp nc opgRATinM 

(10) sZt'al f ^ ^-^^criber commun.cation unit 

(10) such as a subscriber telephone and a fixed network 
com^umcation unit (20) such as a cellular telephone bases.te 
and sw.tch.ng center. The subscriber commun.cation urn 0) 
^ comprised of a microprocessing stage (12), a non-vo,at, I 
memory un.t (11). a radio frequency (RF) stane M^^ T 

s~rs:r; "\ -^ritstre^'a ^L^^in::: 

taf/nV ^ ^""^ P^"^ °" ^ telephone (to enter a 

elephone number - data,, a subscriber call sequence cou ter 

the en. h'" T"' -"Ciphering stage referred to as 

the enciphered serial number (16). 

Within the non-volatile memory unit (11) reside, th» 
ser,a, number (18) (for the subscriber un„),' pin ng, ^nd 
ZaZT'T ''""'""^ '"^-h can have or 

S The Pr'^*'" " Numb r 

unit indlh! r J ' '° °"'y '° ^"''^cnber 

availLT„ T ^•'^^P'^. not be 

available to a legitimate user of a subscriber unit and a 
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fixed network communication unit database. The subscriber 
need only enter the PIN one time to activate it. The PIN may be 
changed by the subscriber, but the change must also be made 
known to the fixed network unit. These identifiers need, not 
5 necessarily be numbers but may correspond to any attribute 
capable of being identified by the fixed network 
communications unit. An alternative embodiment, for example, 
in a cellular system, may include a stored look up table 
containing multiple sets of serial numbers, PIN's, and 
ic telephone numbers with each set of identifiers corresponding 
to a specific cellular area or fixed network communication 
unit. 

The fixed network communication unit (20) includes a 
switching center which is comprised of a microprocessing 

15 stage (22), a database (23). and a link to a basesite radio 
frequency stage (21). all as well understood in the art. 
Additional elements include a fixed network unit call sequence 
counter (24) and an enciphered serial number generated by the-- 
fixed network unit (25). 

20 The database includes information regarding the 

subscriber unit's: serial number (28). PIN (27). and subscriber 
telephone number (26); the information includes a stored copy^ 
of the serial number (28), PIN (27), and the subscriber 
telephone number (26). The serial number (18), PIN (19). and 

25 telephone number (17) of the subscriber communication unit 
(10) correspond to the serial number (28). PIN (27), and 
telephone number (26) as stored in the fixed network 
communication unit (20). Communication between the 
subscriber communication unit (10) and the fixed network 

30 communication unit (20) is accomplished via RF transmissions 
between the two units in accordance with well understood 
cellular system techniques. 

When authentication \<=; required of the subscriber 
communication unit (10). the subscriber unit enciphers its 
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serial number (18) and increments its call sequence counter 
(15). FIG. 2 depicts the method used by a subscriber 
communication unit to encipher its serial number before 
transmission to a fixed network communication unit dunng an 
authentication request (29). This method requires use of two 
enciphering keys. The subscriber unit obtains the called 
telephone number (data) (30) and obtains PIN (31) from 
rriemory and uses at least parts of these two components as 
the enciphenng keys to encipher its serial number (32) If PIN 
and the called telephone number are comprised of bits the 
parts of these keys to be used are the contents of the bits and 
the bit length of each key. For example, an enciphered serial 
number may have a different bit length than the unenciphered 
serial number, or unmodified first ID, depending on the 
contents of the PIN or the data. Varying the enciphered SN bit 
length may also be a function of another event known to both 
the subscriber and fixed network unit such as the time of day 

The algorithm to integrate the two enciphering keys may 
be varied to accommodate various levels of security depending 
upon the requirement of the system. The subscriber 
Identification enciphering method does not require 
authentication to be confirmed by the fixed network 
communication unit before data is transmitted. Combining PIN 
with data adds the ability of the system to encipher a serial 
number into a complex code to an extent sufficient to 
substantially eliminate unauthorized detection by RF 
eavesdropping and unauthorized divulgence by installers 

The modified serial number (enciphered SN) becomes a 
component of the Authentication Request Message (ARM) (35) 
that IS transmitted via RF (36) to the fixed network 
communication unit. Once encipherment is complete the 
assigned telephone number is obtained (33) from memory This 
number is not enciphered as part of the authentication 
procedure. This identifier is a component of the ARM (35) that 



30 
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informs the fixed network unit that the authentication request 
is coming from a valid subscriber unit. 

The call sequence count is then obtained (34) and also 
used in the ARM (35). The call sequence count is updated 
5 (incremented or decremented) each time a predetermined event 
occurs such as when the authentication procedure is initiated 
or a call is completed. The count may be maintained by the 
subscriber and fixed network unit using a rollover type counter 
such as a ring counter. This count is used by the fixed network 

10 communication unit as a means to count the number of calls 
. made by each subscriber. Because a record of the number of 
calls made by each subscriber is maintained by both the 
subscriber unit and the fixed network communication unit, 
another subscriber trying to use the same serial number will 

15 be detected because it will not have made the exact same 
number of calls as the legitimate subscriber. The call 
sequence count information is communicated to the fixed 
network unit as one component of the Authentication Request " 
Message, The ARM can be communicated in any acceptable 

20 format or in any number of stages. Components of a typical 
ARM (35) include data, the enciphered serial number, the call 
sequence count, and the assigned telephone number. An 
alternative embodiment would include modifying the call 
sequence count using the same enciphering method that is used 

25 to modify the SN. This would further enhance the protection 
because the count is also disguised using the PIN and data; 
each subscriber would generate a different value for the same 
count (number of calls made). 

A fixed network communication unit receives a 

3c transmitted ARM and uses this information to determine 

whether authentication should be granted to the subscriber 
unit. FIG. 3 depicts the authentication method performed by a 
fixed network unit. The ARM is received (37) by the ^ixed 
network unit by means of the base RF unit (21). The fixed 
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network unit has access to assigned telephone number's serial 
number's and PIN's of valid subscriber units through its ' 
database. The fixed network unit determines if the assigned 
telephone number received in the ARM is valid (39) by 
obtammg from the fixed network unit database the same 
assigned telephone number (38). A comparison is made 
between the received telephone number from the subscriber 
unit and the valid number found in the database (39) if the 
assigned telephone number is not recognized by the fixed 
network unit, authentication is denied (or some other action 
taken) (40). 

If the assigned telephone number is determined to be 
valid (It IS found m the database), the fixed network unit then 
retrieves from the database the serial number and PIN 
corresponding to that particular assigned telephone number 
The fixed network unit then, uses the PIN from the database 
and the data received in the ARM as enciphering keys as 
elements of its enciphering method (44), which is the same 
method used in the subscriber unit, and generates its own 
enciphered serial number. The fixed network unit compares 
this enciphered serial number to the serial number enciphered 
by the subscriber unit(46). If they are not substantially the 
same, then the system denies access or takes some other 
predetermined course of action (47). If they are within the 
acceptable tolerance, the received call sequence count is 
obtained (48) and compared (50) to the call count maintained 
Dy the fixed network communication unit (49). If the counts 
are substantially equal, authentication may be confirmed (52) 
which IS the first predetermined course of action At this 
point, the subscriber may be allowed to communicate with the 
third communication unit associated with the dialed number 
This third unit may more generally be termed a requested 
communication resource. If t^e count is not within the 
acceptable tolerance, authentication may be denied or the 
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authorities may be notified that a multiple user is attempting 
to access the system (51). 

The fixed network unit call counter maintains the number 
of times authentication is granted to a subscriber. Each 
t subscriber has its own call counter. Having a continuous call 
counting scheme between a subscriber and a fixed network 
communication unit prevents another subscriber from using 
some other subscriber's identification number because the 
thief would not have made the identical number of calls that 

ic the legitimate subscriber made. This discrepancy is flagged by 
the fixed network unit when it compares the two counts. 

Protection against illegitimate users is further enhanced 
by the encipherment method's use of the enciphered dialed 
telephone number and the PIN (which is not transmitted). 

15 Without an illegitimate user knowing a subscriber's PIN and 
the exact algorithm that enciphers the serial number, a thief 
is limited to merely copying the authentication message of a 
subscriber and repeating this message. Each time a subscriber 
dials a different telephone number, a different authentication 

20 request message is generated because each subscriber has a 
different PIN; each subscriber generates a different 
authentication request message for the same telephone 
number. 

Although a thief may detect the call sequence count 
25 (because it is not enciphered in the ARM) and update, it, a 

correct count would only allow the thief to gain authentication 
for the enciphered dialed telephone number he intercepted. 
Therefore the illegitimate user can only communicate to the 
subscriber whose enciphered telephone number matches that 
30 copied from the ARM. 

An alternative embodiment comprising the call sequence 
count may allow each subscriber to maintain more than one 
call counter where a separate call counter is required for each 
fixed network communication unit. This embodiment would 
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find use in a cellular communication system which allowed a 
subscriber to use multiple fixed network communication units. 
Another alternative embodiment to the flow in FIG. 3 may 
require the step of comparing the call sequence counts (50) to 
occur before the step involving the comparison of enciphered 
serial numbers (46). 
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CLAIMS 

What we claim is: 



1. A method for facilitating communications between a 
first communication unit and a second communication unit, 
comprising the steps of: 

A) providing the first communication unit with at least one ID 
iG and data, having post authentication utility, to be transmitted; 

B) providing the second communication unit with information 
regarding the ID; 

C) in the first communication unit, modifying the ID at least in 
part as a function of at least part of the data, having post 

15 authentication utility, to be transmitted to provide a modified 
ID; 

D) transmitting, from the first communication unit to the 
second communication unit, at least the modified ID and at 
least part of the data, having post authentication utility, to be 

2c transmitted. 
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2. A method for facilitating communications between a 
first communication unit and a second communication unit. . 
comprising the steps of: 

A) providing the first communication unit with at least a first 
and second ID and data, having post authentication utility, to 
be transmitted; 

B) providing the second communication unit with information 
regarding the first and second ID; 

C) in the first communication unit, modifying the first ID as a 
function of at least part of the data, having post 
authentication utility, to be transmitted and the second ID to 
provide a modified first ID; 

D) transmitting, from the first communication unit to the 
second communication unit, at least the modified first ID and 
at least part of the data, having post authentication utility, to 
be transmitted. 
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3. The method of claim 2 wherein the second ID is not 
transmitted in the transmitting step, 

4. The method of claim 1 or 2 wherein the data, having post 
authentication utility, to be transmitted includes at least 
identifying information regarding a third communication unit. 

5. The method of claim 4 wherein the identifying 
information includes a telephone number. 
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6. A method for facilitating communications between a 
first communication unit and a second communication unit, 
comprising the steps of: 

A) maintaining an historic non-arbitrary value in both the first 
and second communication units, of predetermined 
communication events as between the first and second 
communication units; 

B) transmitting, at least from time to time, from the first 
communication unit to the second communication unit, count 
information as maintained by the first communication unit; 

C) receiving, at the second communication unit, the historic 
non-arbitrary value information; 

D) comparing, at the second communication unit, the historic 
non-arbitrary value information as received from the first 
communication unit with count information as maintained by 
the second communication unit; 

E) when the historic non-arbitrary value information as 
received from the first communication unit is substantially 
the same as the historic non-arbitrary value information as 
maintained by the second communication unit, taking a first 
predetermined course of action; 

F) when the historic non-arbitrary value information as 
received from the first communication unit is substantially 
different from the historic non-arbitrary value information as 
maintained by the second communication unit, taking a second 
predetermined course of action. 
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7. The method of claim 6 wherein the first predetermined 
course of action includes providing the first communication 
unit with a requested communication resource. 

5 8. The method of claim 6 wherein the historic non-arbitrary 
value may be a count. 

9. The method of claim 6 wherein the predetermined 
communication events are comprised of the telephone calls 

10 attributed to the first . communication unit. 

10. The method of claim 6 wherein the historic non-arbitrary 
value is maintained by a ring counter. 



BNSDOCID: <WO 9101067A2J_> 



wo 91/01067 




PCr/US90/03290 



11. A method for facilitating communications between a 
first communication unit and a second communication unit, 
comprising the steps of: 

A) providing the first communication unit with at least one ID. 
5 data, having post authentication utility, and an historic non- 
arbitrary value to be transmitted; 

B) providing the second communication unit with information 
regarding the ID; 

C) in the first communication unit, modifying the ID and the 

10 historic non-arbitrary value at least in part as a function of at 
least part of the data, having post authentication utility, to be 
transmitted to provide a modified ID and a modified historic 
non-arbitrary value; 

D) transmitting, from the first communication unit to the 
15 second communication unit, at least the modified ID, the 

modified historic non-arbitrary value, and at least part of the 
data, having post authentication utility, to be transmitted. 
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12. A method for facilitating communications between a 
first communication unit and a second communication unit, 
comprising the steps of: 

A) providing the first communication unit with at least a first, 
5 a second ID, an historic non-arbitrary value, and data, having 

post authentication utility, to be transmitted; 

B) providing the second communication unit with information 
regarding the first and second ID; 

C) in the first communication unit, modifying the first ID and 
10 the historic non.-arbitrary value as a function of at least part 

of the data, having post authentication utility, to be 
transmitted and the second ID to provide a modified first ID 
and a modified historic non-arbitrary value; 

D) transmitting, from the first communication unit to the 

15 second communication unit, at least the modified first ID, the 
modified historic non-arbitrary value, and at least part of the 
data, having post authentication utility, to be transmitted. 



3 
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13. A method for facilitating communications between a 
first communication unit and a second communication unit, 
comprising the steps of: 

A) providing the first communication unit with at least a first 
5 and second ID; 

B) providing the second communication unit with information 
regarding the first and second ID; 

C) in the first communication unit, modifying the first ID as a 
function of an event, known to both the first communication 

ic unit and the second communication unit, resulting in a 

modified first ID with at least a modified attribute of the 
unmodified first ID; 

D) transmitting, from the first communication unit to the 
second communication unit, at least the modified first ID; 

15 E) receiving, at the second communication unit, at least the 
modified first ID; 

F) in the second communication unit, modifying the first ID as 
a function of an event, known to both the first communication 
unit and the second communication unit, resulting in a 

2c modified first ID with at least a modified attribute of an 
unmodified first ID; 

G) comparing, at the second communication unit, the modified ' 
first ID as received from the first communication unit with 
the modified first ID generated by the second communication 

25 unit; 

H) when then modified first ID as received from the first 
communication unit is substantially the same as the modified 
first ID as generated by the second communication unit, taking 
a first predetermined course of action; 

3: I) when the modified first ID as received from the first 
communication unit is substantially different from the 
modified first ID as generated by the second communication 
unit, taking a second predetermined course of action. 
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14. The method of Claim 13 wherein the modified attribute 
of the first ID is comprised of a modified bit length of the 
unmodified first ID. 

15. The method of Claim 13' wherein the event known is data, 
having post authentication utility, communicated. 
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